raccoon | JaffaCakes118_fd56faba20194f8fad625de48b1dc798876c4c00a263a88239f3ce2d6663cf0b | Triage

Sharing

General

Target

JaffaCakes118_fd56faba20194f8fad625de48b1dc798876c4c00a263a88239f3ce2d6663cf0b
Size

80KB
MD5

848e64be55cd18f28c1e460264b27644
SHA1

de99db3c56f93a9c344358c26d54b9bd06280697
SHA256

fd56faba20194f8fad625de48b1dc798876c4c00a263a88239f3ce2d6663cf0b
SHA512

c6f567561683d9ff256d46d0741aaa1c38aa3ff916a6b5e5abd9e5994dd37e412947d39b919de68f5100593fa83d8b82ee06df0ae1298f0633d69f60cd926654
SSDEEP

1536:AKndtQGV27VKDGFy6Gu22wHYUdl3q2QRX:ACDQjYu2B4U

Score

10^/10

raccoon

Malware Config

Signatures

Raccoon family
raccoon

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_fd56faba20194f8fad625de48b1dc798876c4c00a263a88239f3ce2d6663cf0b

Files

JaffaCakes118_fd56faba20194f8fad625de48b1dc798876c4c00a263a88239f3ce2d6663cf0b
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ